EAP-MSCHAPv2 is indeed mutual, but is prone to MITM dictionary attacks

src/charon/plugins/eap_mschapv2/eap_mschapv2.c

@@ -1152,7 +1152,7 @@ static status_t get_msk(private_eap_mschapv2_t *this, chunk_t *msk)
  */
 static bool is_mutual(private_eap_mschapv2_t *this)
 {
-	return TRUE;
+	return FALSE;
 }
 
 /**